Automated configuration of machine-to-machine systems

ABSTRACT

A gateway is provided with configuration management logic to identify a set of configurations corresponding to a deployment of a particular application, and automatically send corresponding configuration data to a set of devices in range of the gateway. Service management logic of the gateway determines that assets on the set of devices correspond to one or more asset abstractions defined for the particular application, where the configuration data is sent to the set of devices based on the assets corresponding to the asset abstractions. Sensor data is received during the deployment as generated by a sensor asset of one of the devices, the sensor data is processed according to service logic of the particular application to generate a result, and actuating data is generated and sent during the deployment to an actuator asset on the set of devices based on the result.

CROSS-REFERENCE TO RELATED APPLICATIONS

This application is a continuation of U.S. application Ser. No.16/306,559, filed on Dec. 1, 2018, and entitled AUTOMATED CONFIGURATIONOF MACHINE-TO-MACHINE SYSTEMS, which is a national stage applicationunder 35 U.S.C. § 371 of PCT International Application Serial No.PCT/US2016/040644, filed on Jul. 1, 2016, and entitled AUTOMATEDCONFIGURATION OF MACHINE-TO-MACHINE SYSTEMS. The disclosures of theprior applications are considered part of and are hereby incorporated byreference in their entireties in the disclosure of this application.

TECHNICAL FIELD

This disclosure relates in general to the field of computer systems and,more particularly, to managing machine-to-machine systems.

BACKGROUND

The Internet has enabled interconnection of different computer networksall over the world. While previously, Internet-connectivity was limitedto conventional general purpose computing systems, ever increasingnumbers and types of products are being redesigned to accommodateconnectivity with other devices over computer networks, including theInternet. For example, smart phones, tablet computers, wearables, andother mobile computing devices have become very popular, evensupplanting larger, more traditional general purpose computing devices,such as traditional desktop computers in recent years. Increasingly,tasks traditionally performed on a general purpose computers areperformed using mobile computing devices with smaller form factors andmore constrained features sets and operating systems. Further,traditional appliances and devices are becoming “smarter” as they areubiquitous and equipped with functionality to connect to or consumecontent from the Internet. For instance, devices, such as televisions,gaming systems, household appliances, thermostats, automobiles, watches,have been outfitted with network adapters to allow the devices toconnect with the Internet (or another device) either directly or througha connection with another computer connected to the network.Additionally, this increasing universe of interconnected devices hasalso facilitated an increase in computer-controlled sensors that arelikewise interconnected and collecting new and large sets of data. Theinterconnection of an increasingly large number of devices, or “things,”is believed to foreshadow a new era of advanced automation andinterconnectivity, referred to, sometimes, as the Internet of Things(IoT).

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1A illustrates an embodiment of a system including multiple sensordevices and an example management system;

FIG. 1B illustrates an embodiment of a cloud computing network;

FIG. 2 illustrates an embodiment of a system including an example datamanagement system;

FIG. 3A is a simplified block diagram illustrating an example of assetabstraction and binding;

FIG. 3B is a simplified block diagram illustrating an example of assetdiscovery;

FIG. 3C is a simplified block diagram illustrating an example of assetabstraction and binding using a discovered set of assets;

FIG. 4 is a simplified block diagram illustrating an example gatewaydevice used to deploy a particular machine-to-machine system;

FIG. 5 is a simplified block diagram illustrating an examplemachine-to-machine system;

FIG. 6 is a simplified block diagram illustrating an example of managingapplication of configuration settings between two instances of aparticular machine-to-machine system;

FIG. 7 is a flowchart illustrating an example technique for deploying anexample machine-to-machine network utilizing asset abstraction;

FIG. 8 is a block diagram of an exemplary processor in accordance withone embodiment; and

FIG. 9 is a block diagram of an exemplary computing system in accordancewith one embodiment.

Like reference numbers and designations in the various drawings indicatelike elements.

DETAILED DESCRIPTION OF EXAMPLE EMBODIMENTS

FIG. 1A is a block diagram illustrating a simplified representation of asystem 100 that includes one or more devices 105 a-d, or assets,deployed throughout an environment. Each device 105 a-d may include acomputer processor and/or communications module to allow each device 105a-d to interoperate with one or more other devices (e.g., 105 a-d) orsystems in the environment. Each device can further include one or moreinstances of various types of sensors (e.g., 110 a-c), actuators (e.g.,115 a-b), storage, power, computer processing, and communicationfunctionality which can be leveraged and utilized (e.g., by otherdevices or software) within a machine-to-machine, or Internet of Things(IoT) system or application. Sensors are capable of detecting,measuring, and generating sensor data describing characteristics of theenvironment in which they reside, are mounted, or are in contact with.For instance, a given sensor (e.g., 110 a-c) may be configured to detectone or more respective characteristics such as movement, weight,physical contact, temperature, wind, noise, light, computercommunications, wireless signals, position, humidity, the presence ofradiation, liquid, or specific chemical compounds, among several otherexamples. Indeed, sensors (e.g., 110 a-c) as described herein,anticipate the development of a potentially limitless universe ofvarious sensors, each designed to and capable of detecting, andgenerating corresponding sensor data for, new and known environmentalcharacteristics. Actuators (e.g., 115 a-b) can allow the device toperform (or even emulate) some kind of action or otherwise cause aneffect to its environment (e.g., cause a state or characteristics of theenvironment to be maintained or changed). For instance, one or more ofthe devices (e.g., 105 b, d) may include one or more respectiveactuators that accepts an input and perform its respective action inresponse. Actuators can include controllers to activate additionalfunctionality, such as an actuator to selectively toggle the power oroperation of an alarm, camera (or other sensors), heating, ventilation,and air conditioning (HVAC) appliance, household appliance, in-vehicledevice, lighting, among other examples. Actuators may also be providedthat are configured to perform passive functions.

In some implementations, sensors 110 a-c and actuators 115 a-b providedon devices 105 a-d can be assets incorporated in and/or forming anInternet of Things (IoT) or machine-to-machine (M2M) system. IoT systemscan refer to new or improved ad-hoc systems and networks composed ofmultiple different devices interoperating and synergizing to deliver oneor more results or deliverables. Such ad-hoc systems are emerging asmore and more products and equipment evolve to become “smart” in thatthey are controlled or monitored by computing processors and providedwith facilities to communicate, through computer-implemented mechanisms,with other computing devices (and products having network communicationcapabilities). For instance, IoT systems can include networks built fromsensors and communication modules integrated in or attached to “things”such as equipment, toys, tools, vehicles, etc. and even living things(e.g., plants, animals, humans, etc.). In some instances, an IoT systemcan develop organically or unexpectedly, with a collection of sensorsmonitoring a variety of things and related environments andinterconnecting with data analytics systems and/or systems controllingone or more other smart devices to enable various use cases andapplication, including previously unknown use cases. Further, IoTsystems can be formed from devices that hitherto had no contact witheach other, with the system being composed and automatically configuredspontaneously or on the fly (e.g., in accordance with an IoT applicationdefining or controlling the interactions). Further, IoT systems canoften be composed of a complex and diverse collection of connecteddevices (e.g., 105 a-d), such as devices sourced or controlled by variedgroups of entities and employing varied hardware, operating systems,software applications, and technologies.

Facilitating the successful interoperability of such diverse systems is,among other example considerations, an important issue when building ordefining an IoT system. Software applications can be developed to governhow a collection of IoT devices can interact to achieve a particulargoal or service. In some cases, the IoT devices may not have beenoriginally built or intended to participate in such a service or incooperation with one or more other types of IoT devices. Indeed, part ofthe promise of the Internet of Things is that innovators in many fieldswill dream up new applications involving diverse groupings of the IoTdevices as such devices become more commonplace and new “smart” or“connected” devices emerge. However, the act of programming, or coding,such IoT applications may be unfamiliar to many of these potentialinnovators, thereby limiting the ability of these new applications to bedeveloped and come to market, among other examples and issues.

As shown in the example of FIG. 1A, multiple IoT devices (e.g., 105 a-d)can be provided from which one or more different IoT applications can bebuilt. For instance, a device (e.g., 105 a-d) can include such examplesas a mobile personal computing device, such as a smart phone or tabletdevice, a wearable computing device (e.g., a smart watch, smart garment,smart glasses, smart helmet, headset, etc.), purpose-built devices suchas and less conventional computer-enhanced products such as home,building, vehicle automation devices (e.g., smartheat-ventilation-air-conditioning (HVAC) controllers and sensors, lightdetection and controls, energy management tools, etc.), smart appliances(e.g., smart televisions, smart refrigerators, etc.), and otherexamples. Some devices can be purpose-built to host sensor and/oractuator resources, such as a weather sensor devices that includemultiple sensors related to weather monitoring (e.g., temperature, wind,humidity sensors, etc.), traffic sensors and controllers, among manyother examples. Some devices may be statically located, such as a devicemounted within a building, on a lamppost, sign, water tower, secured toa floor (e.g., indoor or outdoor), or other fixed or static structure.Other devices may be mobile, such as a sensor provisioned in theinterior or exterior of a vehicle, in-package sensors (e.g., fortracking cargo), wearable devices worn by active human or animal users,an aerial, ground-based, or underwater drone among other examples.Indeed, it may be desired that some sensors move within an environmentand applications can be built around use cases involving a movingsubject or changing environment using such devices, including use casesinvolving both moving and static devices, among other examples.

Continuing with the example of FIG. 1A, software-based IoT managementplatforms can be provided to allow developers and end users to build andconfigure IoT applications and systems. An IoT application can providesoftware support to organize and manage the operation of a set of IoTdevice for a particular purpose or use case. In some cases, an IoTapplication can be embodied as an application on an operating system ofa user computing device (e.g., 120) or a mobile app for execution on asmart phone, tablet, smart watch, or other mobile device (e.g., 125,130). In some cases, the application can have an application-specificmanagement utility allowing users to configure settings and policies togovern how the set devices (e.g., 105 a-d) are to operate within thecontext of the application. A management utility can also be used toselect which devices are used with the application. In other cases, adedicated IoT management application can be provided which can managepotentially multiple different IoT applications or systems. The IoTmanagement application, or system, may be hosted on a single system,such as a single server system (e.g., 140) or a single end-user device(e.g., 125, 130, 135). Alternatively, an IoT management system can bedistributed across multiple hosting devices (e.g., 125, 130, 135, 140,etc.).

In still other examples, IoT applications may be localized, such that aservice is implemented utilizing an IoT system (e.g., of devices 105a-d) within a specific geographic area, room, or location. In someinstances, IoT devices (e.g., 105 a-d) may connect to one or moregateway devices (e.g., 150) on which a portion of managementfunctionality (e.g., as shared with or supported by management system140) and a portion of application service functionality (e.g., as sharedwith or supported by application system 145). Service logic andconfiguration data may be pushed (or pulled) from the gateway device 150to other devices within range or proximity of the gateway device 150 toallow the set of devices (e.g., 105 a-s and 150) to implement aparticular service within that location. A gateway device (e.g., 150)may be implemented as a dedicated gateway element, or may be amulti-purpose or general purpose device, such as another IoT device(similar to devices 105 a-d) that itself may include sensors and/oractuators to perform tasks within an IoT system, among other examples.

In some cases, applications can be programmed, or otherwise built orconfigured, utilizing interfaces of an IoT management system. In somecases, the interfaces can adopt asset abstraction to simplify the IoTapplication building process. For instance, users can simply selectclasses, or taxonomies, of devices and logically assemble a collectionof select devices classes to build at least a portion of an IoTapplication (e.g., without having to provide details regardingconfiguration, device identification, data transfer, etc.). Further, IoTapplication systems built using the IoT management system can besharable, in that a user can send data identifying the built system toanother user, allowing the other user to simply port the abstractedsystem definition to the other user's environment (even when thecombination of device models is different from that of the originaluser's system). Additionally, system or application settings, defined bya given user, can be configured to be sharable with other users orportable between different environments, among other example features.

In some cases, IoT systems can interface (through a corresponding IoTmanagement system or application or one or more of the participating IoTdevices) with remote services, such as data storage, informationservices (e.g., media services, weather services), geolocation services,and computational services (e.g., data analytics, search, diagnostics,etc.) hosted in cloud-based and other remote systems (e.g., 140, 145).For instance, the IoT system can connect to a remote service (e.g., 145)over one or more networks 120. In some cases, the remote service can,itself, be considered an asset of an IoT application. Data received by aremotely-hosted service can be consumed by the governing IoT applicationand/or one or more of the component IoT devices to cause one or moreresults or actions to be performed, among other examples.

One or more networks (e.g., 120) can facilitate communication betweensensor devices (e.g., 105 a-d), end user devices (e.g., 123, 130, 135),and other systems (e.g., 140, 145) utilized to implement and manage IoTapplications in an environment. Such networks can include wired and/orwireless local networks, public networks, wide area networks, broadbandcellular networks, the Internet, and the like.

In general, “servers,” “clients,” “computing devices,” “networkelements,” “hosts,” “system-type system entities,” “user devices,”“gateways,” “IoT devices,” “sensor devices,” and “systems” (e.g., 105a-d, 125, 130, 135, 140, 145, 150, etc.) in example computingenvironment 100, can include electronic computing devices operable toreceive, transmit, process, store, or manage data and informationassociated with the computing environment 100. As used in this document,the term “computer,” “processor,” “processor device,” or “processingdevice” is intended to encompass any suitable processing apparatus. Forexample, elements shown as single devices within the computingenvironment 100 may be implemented using a plurality of computingdevices and processors, such as server pools including multiple servercomputers. Further, any, all, or some of the computing devices may beadapted to execute any operating system, including Linux, UNIX,Microsoft Windows, Apple OS, Apple iOS, Google Android, Windows Server,etc., as well as virtual machines adapted to virtualize execution of aparticular operating system, including customized and proprietaryoperating systems.

While FIG. 1A is described as containing or being associated with aplurality of elements, not all elements illustrated within computingenvironment 100 of FIG. 1A may be utilized in each alternativeimplementation of the present disclosure. Additionally, one or more ofthe elements described in connection with the examples of FIG. 1A may belocated external to computing environment 100, while in other instances,certain elements may be included within or as a portion of one or moreof the other described elements, as well as other elements not describedin the illustrated implementation. Further, certain elements illustratedin FIG. 1A may be combined with other components, as well as used foralternative or additional purposes in addition to those purposesdescribed herein.

As noted above, a collection of devices, or endpoints, may participatein Internet-of-things (IoT) networking, which may utilize wireless localarea networks (WLAN), such as those standardized under IEEE 802.11family of standards, home-area networks such as those standardized underthe Zigbee Alliance, personal-area networks such as those standardizedby the Bluetooth Special Interest Group, cellular data networks, such asthose standardized by the Third-Generation Partnership Project (3GPP),and other types of networks, having wireless, or wired, connectivity.For example, an endpoint device may also achieve connectivity to asecure domain through a bus interface, such as a universal serial bus(USB)-type connection, a High-Definition Multimedia Interface (HDMI), orthe like.

As shown in the simplified block diagram 101 of FIG. 1B, in someinstances, a cloud computing network, or cloud, in communication with amesh network of IoT devices (e.g., 105 a-d), which may be termed a“fog,” may be operating at the edge of the cloud. To simplify thediagram, not every IoT device 105 is labeled.

The fog 170 may be considered to be a massively interconnected networkwherein a number of IoT devices 105 are in communications with eachother, for example, by radio links 165. This may be performed using theopen interconnect consortium (OIC) standard specification 1.0 releasedby the Open Connectivity Foundation™ (OCF) on Dec. 23, 2015. Thisstandard allows devices to discover each other and establishcommunications for interconnects. Other interconnection protocols mayalso be used, including, for example, the optimized link state routing(OLSR) Protocol, or the better approach to mobile ad-hoc networking(B.A.T.M.A.N.), among others.

Three types of IoT devices 105 are shown in this example, gateways 150,data aggregators 175, and sensors 180, although any combinations of IoTdevices 105 and functionality may be used. The gateways 150 may be edgedevices that provide communications between the cloud 160 and the fog170, and may also function as charging and locating devices for thesensors 180. The data aggregators 175 may provide charging for sensors180 and may also locate the sensors 180. The locations, charging alerts,battery alerts, and other data, or both may be passed along to the cloud160 through the gateways 150. As described herein, the sensors 180 mayprovide power, location services, or both to other devices or items.

Communications from any IoT device 105 may be passed along the mostconvenient path between any of the IoT devices 105 to reach the gateways150. In these networks, the number of interconnections providesubstantial redundancy, allowing communications to be maintained, evenwith the loss of a number of IoT devices 105.

The fog 170 of these IoT devices 105 devices may be presented to devicesin the cloud 160, such as a server 145, as a single device located atthe edge of the cloud 160, e.g., a fog 170 device. In this example, thealerts coming from the fog 170 device may be sent without beingidentified as coming from a specific IoT device 105 within the fog 170.For example, an alert may indicate that a sensor 180 needs to bereturned for charging and the location of the sensor 180, withoutidentifying any specific data aggregator 175 that sent the alert.

In some examples, the IoT devices 105 may be configured using animperative programming style, e.g., with each IoT device 105 having aspecific function. However, the IoT devices 105 forming the fog 170 maybe configured in a declarative programming style, allowing the IoTdevices 105 to reconfigure their operations and determine neededresources in response to conditions, queries, and device failures.Corresponding service logic may be provided to dictate how devices maybe configured to generate ad hoc assemblies of devices, includingassemblies of devices which function logically as a single device, amongother examples. For example, a query from a user located at a server 145about the location of a sensor 180 may result in the fog 170 deviceselecting the IoT devices 105, such as particular data aggregators 175,needed to answer the query. If the sensors 180 are providing power to adevice, sensors associated with the sensor 180, such as power demand,temperature, and the like, may be used in concert with sensors on thedevice, or other devices, to answer a query. In this example, IoTdevices 105 in the fog 170 may select the sensors on particular sensor180 based on the query, such as adding data from power sensors ortemperature sensors. Further, if some of the IoT devices 105 are notoperational, for example, if a data aggregator 175 has failed, other IoTdevices 105 in the fog 170 device may provide substitute, allowinglocations to be determined.

Further, the fog 170 may divide itself into smaller units based on therelative physical locations of the sensors 180 and data aggregators 175.In this example, the communications for a sensor 180 that has beeninstantiated in one portion of the fog 170 may be passed along to IoTdevices 105 along the path of movement of the sensor 180. Further, ifthe sensor 180 is moved from one location to another location that is ina different region of the fog 170, different data aggregators 175 may beidentified as charging stations for the sensor 180.

As an example, if a sensor 180 is used to power a portable device in achemical plant, such as a personal hydrocarbon detector, the device willbe moved from an initial location, such as a stockroom or control room,to locations in the chemical plant, which may be a few hundred feet toseveral thousands of feet from the initial location. If the entirefacility is included in a single fog 170 charging structure, as thedevice moves, data may be exchanged between data aggregators 175 thatincludes the alert and location functions for the sensor 180, e.g., theinstantiation information for the sensor 180. Thus, if a battery alertfor the sensor 180 indicates that it needs to be charged, the fog 170may indicate a closest data aggregator 175 that has a fully chargedsensor 180 ready for exchange with the sensor 180 in the portabledevice.

With the growth of IoT devices and system, there are increasing numbersof smart and connected devices available in the market, such as devicescapable of being utilized in home automation, factory automation, smartagriculture, and other IoT applications and systems. For instance, inhome automation systems, automation of a home is typically increased asmore IoT devices are added for use in sensing and controlling additionalaspects of the home. However, as the number and variety of devicesincrease, the management of “things” (or devices for inclusion in IoTsystems) becomes outstandingly complex and challenging.

Some device management applications may be configured with presetsettings designed to allow users to set up their systems quickly andwith minimal work configuring the device. However, those settings maynot be universally desirable, potentially limiting their flexibility andoverall utility. In cases, where settings are configurable, a user maynonetheless struggle to make sense of the ideal combination of settingvalues, resorting to trial and error to figure out the optimal settingsfor their system (e.g., smart home, office, car, etc.). Indeed, thecombination of settings that is ideal or optimal to one user may besubjective, however, other users may still be interested in the settingvalues determined by others which yielded these other users desirableresults. For instance, a guest of a first user may observe, first hand,the configuration of the first user's system and desire to recreate theattributes of the observed system in their own system. However, intraditional systems, system settings are typically not portable duegiven that they are usually tied to identities of devices.

In traditional systems, each IoT device has its own device's uniquemedia access control (MAC) address or other device identifier.User-customized settings may be tied to a specified device present inthe system when the settings were first configured. However, intraditional systems, when a user replaces this device with another(e.g., newer) substitute device, the user is often required toreconfigure the device settings (including device identifier and deviceMAC address) in the application.

In some implementations, an improved system may be provided withenhancements to address at least some of the example issues above. Forinstance, In modern societies, large numbers of people carry with themat least one electronic device that possesses network communicationcapabilities such as a smartphone, smartwatch, wearable, or other mobiledevice. In addition to network communication, such devices are alsotypically equipped with resources such as microphones, speakers and avariety of sensors (accelerometer, light, temperature etc.). The nearubiquitous presence of mobile devices, however, present opportunitiesfor a wide array of machine-to-machine networks and correspondingservices to be deployed. Gateway devices may be provided, to identifyopportunities to interconnect or build services upon collections ofdevices within an area in an ad hoc and impromptu manner (e.g., withoutrequiring device-specific configurations or user involvement in settingup the network and service).

Services that may be developed, ad hoc, using a collection of detectedmobile devices may include examples such as the deployment of an IoTservice that intelligently uses the resources of nearby device tofacilitate coordinated evacuation/rescue efforts (e.g., involving theusers of the devices). For instance, smartphones in an affected area orbuilding may be identified and configured to transmit location beacons,tune microphones to pick up and transmit certain categories of sounds orusing speakers to emit sounds on a certain frequency when the devicedetects a specific sound pattern on another frequency used by rescuers,among other features. In another example, a collection of devices may beidentified to provide an impromptu enhancement (video and/or audio) tosocial events such as concerts, sporting events, and the like (e.g.,configuring a collection of smartphone screens or flashlights to createa visual mosaic inside a stadium).

Localized IoT services may also be launched such that they follow amobile device from location to location, such that consistent IoTservices (e.g., tuned to a particular user) are provided on varying setsof IoT devices within each location. For instance, an indoor environmentcontrol may be implemented based on smartphone sensor inputs and causeother smart IoT devices providing environmental services (e.g., lights,heating, ventilating, and air conditioning (HVAC) systems, speakers,etc.) to be configured to implement a preferred environment. Forexample, a system can use inputs from smartphone light and temperaturesensors and preconfigured preferences to adjust lighting and heatingbased on when a person (and their phone) enters or leaves a room (e.g.,of a home or office building). Further, IoT configurations and servicesthat are personally adjusted from a “home” IoT system may be transportedto other IoT systems being visited (e.g. to recreate aspects of a homeenvironment inside a hotel room, vacation home, etc.). Further, personalIoT configurations and services may be sharable, such that users mayaccess and adopt (or building upon) a desirable configuration created byanother user for another set of devices, among other features.

To facilitate the deployment of impromptu IoT systems, improved IoTmanagement functionality may be provided to utilize asset abstraction tosignificantly reduce the human touch points during deployment andredeployment. For instance, IoT management and applications can adopt aparadigm where, instead of referencing and being programmed tointeroperate with specific IoT devices, the system can refer toabstracted classes, or taxonomies, of IoT devices (or “assets”). Assetabstraction can be leveraged to automatically configure a deployed IoTsystem with minimal human intervention. Indeed, in some instances,configuration of the system can progress without a user having toactually specify which device to use. Instead, a deployment policy canbe used instead by the system to automatically select and configure atleast a portion of the devices within the system. Further, assetabstraction can facilitate addressing the challenge of portability ofIoT applications, which has traditionally limited the generalscalability and resiliency of IoT applications.

Asset abstraction can be coupled with automated asset binding, in somecases, to eliminate the necessity of including a device/asset's uniqueID in an IoT application or management program. Asset discovery providedwith the application or management program can provide an effectivemeans for specifying policy and confining the scope of asset binding.Through the combination of asset discovery, asset abstraction, and assetbinding makes IoT applications portable, reusable and sharable.

In some implementations, with asset abstraction, assets are treatedindifferently as long they fall into a same category in the taxonomy,e.g., occupancy sensing, image capture, computation, etc. An IoTapplication, consequently, can be made portable, reusable and sharable,as it can be written and stored in a way that specifies onlyrequirements (e.g., references to abstracted device taxonomies providingthe requirements) without specifying the precise identity (or catalogueof identities) of compatible devices meant to provide theserequirements. Asset discovery allows all available resources to besearched to detect those meeting the requirements and further selected,in some instances, on the basis of customizable or policy-basedcriteria.

Systems, such as those shown and illustrated herein, can include machinelogic implemented in hardware and/or software to implement the solutionsintroduced herein and address at least some of the example issues above(among others). For instance, FIG. 2 shows a simplified block diagram200 illustrating a system including multiple IoT devices (e.g., 105 a-c)with assets (e.g., sensors (e.g., 110 a) and/or actuators (e.g., 115 a))capable of being used in a variety of different IoT applications. In theexample of FIG. 2, a gateway device 150 is provided with system managerlogic 205 (implemented in hardware and/or software) to detect assetswithin a location and identify opportunities to deploy an IoT systemutilizing the detected assets. In some implementations, at least aportion of the service logic (e.g., 202) utilized to drive the functionof the IoT application may be hosted on the gateway 150. Service logic(e.g., 204) may also be hosted (additionally or alternatively) on one ormore remote computing devices implementing a server of the service logic204. Configuration data (e.g., 206, 208) to be used to configure theassets to be utilized in the deployment of the IoT system may also behosted on the gateway 150 and/or a remote server (e.g., 140), amongother example implementations.

In the particular example of FIG. 2, the gateway 150 may include one ormore data processing apparatus (or “processors”) 210, one or more memoryelements 212, and one or more communication modules 214 incorporatinghardware and logic to allow the gateway to communicate over one or morenetworks, utilizing one or more technologies (e.g., WiFi, Bluetooth,Near Field Communications, Zigbee, Ethernet, etc.), with other systemsand devices (e.g., 105 a, 105 d, 140, 145, etc.). The system manager 205may be implemented utilizing code executable by the processor 210 tomanage the automated deployment of a local IoT system. In one example,system manager 205 may include components such as an asset discoverymodule 225, asset abstraction manager 230, asset binding manager 235,setting manager 240, configuration manager 245, runtime manager 250, andsecurity engine 260, among other example components (or combinations ofthe foregoing).

In one example, an asset discovery module 225 may be providefunctionality to allow the gateway 150 to determine which IoT devicesare within range of the gateway and thus fall within a particularlocation for which one or more IoT services may be deployed. In someimplementations, the asset discovery module 225 makes use of thewireless communication capabilities (e.g., 214) of the gateway 150 toattempt to communicate with devices within a particular radius. Forinstance, devices within range of a WiFi or Bluetooth signal emittedfrom the antenna(e) of the communications module(s) 214 of the gateway(or the communications module(s) (e.g., 262, 264) of the assets (e.g.,105 a,d)) can be detected. Additional attributes can be considered bythe asset discovery module 225 when determining whether a device issuitable for inclusion in a listing of devices for a given system orapplication. In some implementations, conditions can be defined fordetermining whether a device should be included in the listing. Forinstance, the asset discovery module 225 may attempt to identify, notonly that it is capable of contacting a particular asset, but may alsodetermine assets such as physical location, semantic location, temporalcorrelation, movement of the device (e.g., is it moving in the samedirection and/or rate as the discovery module's host), permissions oraccess level requirements of the device, among other characteristics. Asan example, in order to deploy smart lighting control for every room ina home- or office-like environment, an application may be deployed in a“per room basis.” Accordingly, the asset discovery module 225 candetermine a listing of devices that are identified (e.g., through ageofence or semantic location data reported by the device) as within aparticular room (despite the asset discovery module 225 being able tocommunicate with and detect other devices falling outside the desiredsemantic location).

Conditions for discovery can be defined in service logic (e.g., 202,204) of a particular IoT application. For instance, criteria can bedefined to identify which types of resources are needed or desired toimplement an application. Such conditions can go beyond proximity, andinclude identification of the particular types of assets that theapplication is to use. For instance, the asset discovery module 225 mayadditionally identify attributes of the device, such as its model ortype, through initial communications with a device, and therebydetermine what assets and asset types (e.g., specific types of sensors,actuators, memory and computing resources, etc.) are hosted by thedevice. Accordingly, discovery conditions and criteria can be definedbased on asset abstractions (or asset taxonomies) defined for the IoTapplication. Some criteria may be defined that is specific to aparticular asset types, where the criteria has importance for some assettypes but not for others in the context of the corresponding IoTapplication. Further, some discovery criteria may be configurable suchthat a user can custom-define at least some of the criteria orpreferences used to select which devices to utilize in furtherance of anIoT application.

A system manager 205 can also include an asset abstraction module 230.An asset abstraction module 230 can recognize defined mappings betweenspecific IoT devices or, more generally, specific functionality that maybe included in any one of a variety of present or future IoT deviceswith a collection of defined taxonomies, or device abstractions. Theasset abstraction module 230 can determine, for each asset discovered byan asset discovery module 225 (e.g., according to one or moreconditions), a respective asset abstraction, or taxonomy, to which theasset “belongs”. Each taxonomy can correspond to a functional capabilityof an asset. Assets known or determined to possess the capability can begrouped within the corresponding taxonomy. Some multi-function assetsmay be determined to belong to multiple of the taxonomies. The assetabstraction module 230 can, in some cases, determine the abstraction(s)to be applied to a given asset based on information received from theasset (e.g., during discovery by asset discovery module 225). In somecases, the asset abstraction module can obtain identifiers from eachasset and query a backend database for pre-determined abstractionassignments corresponding to that make and model of asset, among otherexamples. Further, in some implementations, the asset abstraction module230 can query each asset (e.g., according to a defined protocol) todetermine a listing of the capabilities of the asset, from which theasset abstraction module 230 can map the asset to one or more definedabstraction taxonomies. Asset abstraction module 230 allows theapplication to treat every asset falling within a given taxonomy assimply an instance of that taxonomy, rather than forcing the systemmanager 205 to track every possible device model with which it might beasked to manage or service logic 202, 204 to be designed to considerevery possible permutation of a particular type of device. Assetabstraction module 225 can access a taxonomy framework (defined on anapplication-, system-, or universal-basis) that abstracts away theprecise device into taxonomies including higher- and lower-leveltaxonomies for sensing, actuating, computation, storage, and othertaxonomies. With asset abstraction, assets are treated indifferently aslong they fall into a same category in the taxonomy, e.g., occupancysensing. Deployment of an IoT application, implemented through itscorresponding service logic 202, 204 and configurations 206, 208, may beautomated in part through asset abstraction, allowing applications to bedeveloped and deployed without concern for the specific identities ofthe devices to be used in the system.

A system manager 205 can also include an asset binding module 235 whichcan select, from the discovered assets, which assets to deploy for asystem. In some cases, upon selecting an asset, the asset binding module235 can operate with configuration manager 245 to send configurationinformation (e.g., 206, 208) to selected assets to cause eachcorresponding asset to be configured for use in a particular service.This can involve provisioning the asset with corresponding service logiccode (e.g., to allow it to communicate and interoperate with thegateway, a backend server (e.g., 145), and/or other assets selected fordeployment), logging in, unlocking, or otherwise enabling the asset,sending session data to or requesting a session with the asset, amongother examples. In cases where multiple assets of the same taxonomy havebeen identified (and exceed a maximum desired number of instances of thetaxonomy), the asset binding module 235 can additionally assess which ofthe assets is the best fit for the deployment. For instance, servicelogic (e.g., 202, 204) may define binding criteria indicating desirableattributes of assets to be deployed in an application. These criteriacan be global criteria, applying to instances of every taxonomy, or canbe taxonomy-specific (i.e., only applying to decisions between assetswithin the same taxonomy). Asset binding can provision the assetsspecified by the service logic (e.g., 202, 204) for deploymentautomatically (before or during runtime).

A system manager 205 can additionally provide functionality (e.g.,through configuration manager 240) to allow settings to be applied tothe selected asset taxonomies (or requirements) of the application 210and the application 210 generally. A variety of different settings canbe provided depending on the collection of assets to be used by theapplication and the overall objectives of the application. Defaultsetting values can be defined and further tools can be provided to allowusers to define their own values for the settings (e.g., a preferredtemperature setting of an air conditioned, the number of second to locka smart lock or locker, sensitivity setting utilized for triggering amotion sensor and control, etc.). What settings constitute the “ideal”may be subjective and involve some tinkering by the user. When the useris satisfied with the settings, the user may save the settings as aconfiguration. In some implementations, these configurations can bestored locally at a device (e.g., 105 a,d), on the gateway 150 (e.g.,local configurations 206), or on the cloud (e.g., remote configurationdata 208). In some cases, configurations can be shared, such that a usercan share the settings they found ideal with other users (e.g., friendsor social network contacts, etc.). Configuration data can be generatedfrom which the settings are automatically readopted at runtime by thesystem manager 205, each time a corresponding service is to deploy(e.g., using whatever assets are currently discoverable within aparticular location). Consequently, while specific devices may only beloosely tied to any one user or gateway in a particular deployment of aservice, settings can be strongly tied to a user or service, such thatthe user may migrate between environments and the service may bedeployed in various environments, including environments with differentsets of assets, with the same settings, or configuration, being appliedin each environment. For instance, regardless of the specific deviceidentifiers or implementations selected to satisfy the abstracted assetrequirements of an application or service, the same settings can beapplied (e.g., as the settings, too, are directed to the abstractions ofthe assets (i.e., rather than specific assets)). To the extent aparticular setting does not apply to a selected instance of a taxonomy,the setting can be ignored. If a selected instance of a taxonomypossesses settings that are undefined by the user in the configuration(e.g., because they are unique to the particular asset), default valuesfor these settings can be automatically set or the user can be alertedthat these settings are undefined, among other examples.

A configuration manager 240 may be additionally used in runtime (e.g.,during and following deployment of an IoT system) to cause particularsettings to be applied at the IoT devices (assets) selected fordeployment with the service. The system manager 205 may include logicenabling the system manager 205 (and its composite modules) tocommunicate using a variety of different protocols with a variety ofdifferent devices. Indeed, the system manager 205 can even be used totranslate between protocols to facilitate asset-to-asset communications.Further, the configuration manager 240 can send instructions to each ofthe selected assets for deployment to prompt each asset to adjustsettings in accordance with those defined for the asset taxonomy in thesetting configuration defined in configuration data pushed to (or pulledfrom) the configuration manager 240 during (and potentially also after)deployment.

A system utilizing a gateway enhanced with system manager 205 may beenabled to combine automatic resource management/provisioning withauto-deployment of services. A configuration manager 240 can allowresource configurations from one IoT system to be carried over andapplied to another so that services can be deployed in various IoTsystems. Further, a runtime manager 250 can be utilized to performautomated deployment and management of a service resulting from thedeployment at runtime. Auto-configuration can refer to the configurationof devices with configurations stored locally (e.g., 206) or on a remotenode (e.g., 208), to provide assets (and their host devices) with theconfiguration information to allow the asset to be properly configuredto operate within a corresponding IoT system. As an example, a devicemay be provided with configuration information usable by the device totune a microphone sensor asset on the device so that is might properlydetect certain sounds for use in a particular IoT system (e.g., tune themicrophone to detect specific voice pitches with improved gain).Auto-deployment of a services may involves identification (or discovery)of available devices, device selection (or binding) based on servicerequirements (configuration options, platform, and hardware), andautomated continuous deployment (or re-deployment) to allow the serviceto adapt to evolving conditions.

In one example, a runtime manager 250 may be utilized to direct thedeployment and running of a service on a set of devices within alocation corresponding to gateway 150. In one example, runtime manager250 may trigger asset discovery and binding (e.g., by asset discoverymodule 225 and asset binding manager 235) in connection with thedeployment of a particular application. An application manger 255 may beprovided for a particular application, or service, and may be used tocommunicate with deployed devices (e.g., 105 a,d) to send data to thedevices (e.g., to prompt certain actuators) or receive data (e.g.,sensor data) from the devices. Application manager 255 may furtherutilize service logic and provide received data as inputs to the logicand use the service logic to generate results, including results whichmay be used to prompt certain actuators on the deployed devices. Runtimemanager logic 250 may also be utilized in connection with securitymanagement logic 260, to define security domains within a deployment,for instance, to secure communications between one or more of thedeployed devices and the gateway and/or communications between thedevices themselves.

Portions of the application, or service logic, can be distributed duringdeployment, with service logic capable of being executed locally at thegateway (or even one of the deployment computing assets) and/or remotefrom the deployment location on a cloud-based or other remotely-locatedsystem (e.g., 145). Indeed, in some cases, the gateway (e.g., usingruntime manager 250) may provide one or more assets or their hostdevices (e.g., 105 a,d) with service logic for use during an IoTapplication's deployment. In some cases, the gateway 150 (and runtimemanager 250) may manage deployment and execution of multiple differentapplications (e.g., with corresponding service logic). Differentconfigurations (e.g., using different configuration data instances) ofthe same application may also be supported by a single gateway (e.g.,150). Once assets are provisioned, the deployed assets can be usedcollectively for achieving the goals and functionality designed for theapplication.

In some implementations a system (e.g., 145) may be provided to host andexecute at least a portion of the service logic (e.g., 204) to beutilized to implement an IoT application. In one example, a remoteservice system (e.g., 145) may be provided and can include one or moreprocessors 262, one or more memory elements 264, among other components.The remote service system 145 may interface with one or more gateways(e.g., 150) used to implement one or more instances, or deployments, ofa particular IoT application using one or more networks 120. Data can beprovided by the gateways 150 reporting data received from deployedsensor assets (e.g., 110 a) or reporting results of other service logic(e.g., 202) executed within a deployed system, and the remote servicesystem 145 can utilize this data as inputs for further processing at theremote service system 145 using service logic 204. The results of thisprocessing may then be returned by the remote service system 145 to therequesting gateway (or even a different gateway) to prompt additionalprocessing at the gateway and/or to trigger one or more actuator assets(e.g., 115 a) to perform or launch one or more tasks or outcomes of theIoT application.

Configuration may also be assisted by remotely located (e.g.,cloud-based) systems (e.g., 140). For instance, a configuration server140 may be provided that includes one or more processors 266, one ormore memory elements 268, among other components. In some cases, remotesystems may simply host various configuration data describing variousconfigurations that may be accessed by and applied in a deployment of anIoT system by a gateway 150. In other cases, a configuration server(e.g., 140) may include a configuration manager (e.g., 270) tocoordinate with a gateway 150 to identify configuration data for aparticular deployment. Configuration data supplied by a configurationservicer (e.g., 140) may replace, supersede, or supplement localconfiguration data 206. A configuration server 140 may also facilitatethe sharing and offloading of configuration data (e.g., 208) acrossplatforms, making IoT system configurations “portable” between systemsand locations (e.g., which may utilize different gateways (e.g., 150)with access to varied local configurations), among other examples.Further, a remote configuration manager 270 may replace, supersede, orsupplement the functionality of configuration management logic (e.g.,240) local to various gateways (e.g., 150). Likewise, otherfunctionality of the system manager 205 may also be provided remote fromthe gateway 150 as a service, such as asset abstraction and bindingmanagers (e.g., 230, 235), application manager 255, among others.provided for the s (e.g., 150)

As noted above, asset abstraction can assist not only in easing thedeployment of a system and propagating configurations across multipledifferent systems, but abstraction may also be used to enhance theprogramming of IoT applications. For instance, development systems maybe provided which supplement traditional programming tools (e.g., foruse in coding an application) with declarative programming toolsallowing users, including novice programmers, to specify generalized orabstracted requirements of the IoT application, expressed as collectionsof asset taxonomies. The user may additionally declare relationshipsbetween two or more of the selected taxonomies to indicate input-output,sensor-actuator, or other relationships that are to be automaticallydefined in corresponding application code and thereby develop new IoTapplications (and corresponding service logic (e.g., 202, 204) based onthese abstractions. Such a development paradigm may allow an IoTapplication to be programmed once and deployed everywhere. As anexample, an evacuation IoT service may be developed in advance of andindependent of the identities of the physical devices that will be usedto implement the service, and the physical deployments may be later andautomatically deployed based on the defined abstractions in thecorresponding service logic.

Continuing with the description of FIG. 2, each of the IoT devices(e.g., 105 a,d) may include one or more processors (e.g., 272, 274), oneor more memory elements (e.g., 276, 276), and one or more communicationsmodules (e.g., 262, 264) to facilitate their participation in variousIoT application deployments. Each device (e.g., 105 a,d) can possessunique hardware, sensors (e.g., 110 a), actuators (e.g., 115 a), andother logic (e.g., 280, 282) to realize the intended function(s) of thedevice. For instance, devices may be provided with such resources assensors of varying types (e.g., 110 a, 110 c), actuators (e.g., 115 a)of varying types, energy modules (e.g., batteries, solar cells, etc.),computing resources (e.g., through a respective processor and/orsoftware logic), security features, data storage, and other resources.

Turning to FIG. 3A, a simplified block diagram 300 a is shownrepresenting a simplified example of asset abstraction. A variety ofdifferent taxonomies can be defined at varying levels. For instance, asensor taxonomy can be a parent to a multitude of specific sensor-typetaxonomies (e.g., child taxonomies for light sensing, motion sensing,temperature sensing, liquid sensing, noise sensing, etc.), among otherexamples. In the example of FIG. 3A, an IoT application has been definedto include three asset requirements, represented by taxonomies MotionSensing 305 a, Computation 305 b, and Alarm 305 c. During assetdiscovery, a variety of assets (e.g., 308 a-f) can be identified asusable by the application (e.g., based on the assets meeting one or moredefined discovery conditions). One or more corresponding taxonomies, orabstractions, can be identified (e.g., by an IoT management system) foreach of the assets 308 a-f. Some of the abstractions may not haverelevance to the asset requirements and function of the application,such as an abstraction (e.g., Temperature Sensor and/or HVAC Actuator)determined for thermostat device 308 f. Other asset abstractions maymatch the abstractions (e.g., 305 a-c) designated in the IoT applicationas asset requirements of the application. Indeed, more than onediscovered asset may be fit one of the asset requirements. For instance,in the example of FIG. 3A, a PIR sensor 308 a and camera 308 b are eachidentified as instances of a motion sensing asset taxonomy 305 a.Similarly, a cloud-based computing resource 308 c and network gateway308 d are identified as instances of a computation asset taxonomy 305 b.In other instances, there may be just a single discovered devicesatisfying an application asset requirement (e.g., siren 308 e of thealarm taxonomy 305 c), among other examples.

Conventionally, IoT and wireless sensor network (WSN) applications havebeen developed to intricately define dataflow among a determined set ofphysical devices, which involves device-level discovery in developmenttime to obtain and hardcode the corresponding device identifiers andcharacteristics. By utilizing asset abstraction, development can befacilitated to allow the devices to be discovered and determined atruntime (e.g., at launch of the application), additionally allowing theapplication to be portable between systems and taxonomy instances.Further, development can be expedited by allowing developers to merelyspecify asset requirements (e.g., 305 a-c), without the necessity tounderstand radio protocol, network topology, and other technicalfeatures.

In one example, taxonomies for asset abstraction can involve such parenttaxonomies as sensing assets (e.g., light, presence, temperaturesensors, etc.), actuation (e.g., light, HVAC, machine controllers,etc.), power (e.g., battery-powered, landline-powered, solar-powered,etc.), storage (e.g., SD, SSD, cloud storage, etc.), computation (e.g.,microcontroller (MCU), central processing unit (CPU), graphicalprocessing (GPU), cloud, etc.), and communication (e.g., Bluetooth,ZigBee, WiFi, Ethernet, etc.), among other potential examples.Discovering which devices possess which capabilities (and belong towhich taxonomies) can be performed using varied approaches. Forinstance, some functions (e.g., sensing, actuating, communication) maybe obtained directly from signals received from the device by the systemmanagement system via a common descriptive language (e.g., ZigBee'sprofiles, Bluetooth's profiles and Open Interconnect Consortium'sspecifications), while other features (e.g., power, storage,computation) may be obtained through deeper queries (utilizing resourceson top of the operating system of the queried device), among otherexamples.

Asset binding can be applied to determine which discovered assets(fitting the asset requirements (abstractions) defined for anapplication) are to actually be deployed. Criteria can be defined atdevelopment time and/or before/at runtime by the application's user,which an IoT system manager (e.g., 205) can consult to perform thebinding. For instance, as shown in FIG. 3A, according to the criteriaset forth for the application (or for a particular session using theapplication), one of multiple matching assets for a required taxonomycan be selected. For instance, between PIR sensor 308 a and camera 308b, corresponding criteria (e.g., criteria to be applied generally acrossall taxonomies of the application and/or taxonomies specific to themotion sensing taxonomy 305 a) can result in PIR sensor 308 a beselected to be deployed to satisfy the motion sensing asset requirement305 a of the application. Similarly, criteria can be assessed todetermine that gateway 308 d is the better candidate between it andcloud resource 308 c to satisfy the application's computationrequirement 305 b. For asset requirements (e.g., 305 c) where only asingle discovered instance (e.g., 308 e) of the asset taxonomy isdiscovered, asset binding is straightforward. Those discovered devices(e.g., 308 a, 308 d, 308 e) that have been selected, or bound, can thenbe automatically provisioned with resources from or configured by theIoT system manager (e.g., 205) to deploy the application. Unselectedassets (e.g., 308 b, 308 c, 308 f) may remain in the environment, butare unused in the application. In some instances, unselected assets canbe identified as alternate asset selections (e.g., in the event of afailure of one of the selected assets), allowing for swift replacementof the asset (deployed with the same settings designated for instancesof the corresponding taxonomy).

In some instances, asset binding can be modeled as a bipartite matching(or assignment) problem in which the bipartite graph can be expressed byG=(R,A,E) where R denotes the asset requirements, A denotes theavailable assets and e=(r,a) in E where a in A is capable of r in R.Note that if R requests for n instances of a particular assets, A′ canbe defined as:

$\bigcup\limits_{n}A$from which a solution for the (maximum) (weighted) matching problem canbe computed. For instance, exhaustive search can be applied as thenumber of vertices in the bipartite graph are small and the edges areconstrained in the sense that there is an edge (r,a) only if a iscapable of r.

Turning to the simplified block diagram 300 b of FIG. 3B, an example ofasset discovery is represented. Asset discovery can allow the scope ofavailable devices to be confined based on discovery conditions orcriteria, such as conditions relating to device proximity, room,building, movement state, movement direction, security, permissions,among many other potential (and configurable) conditions. The benefitsof such targeted discovery can trickle down to asset binding, asunchecked discovery may return many possible bindings, especially inlarge scale deployment. For example, in a smart factory, the action of“deploying predictive maintenance” may be ambiguous as there may behundreds of sensors, motors, alarms, etc. in a factory facility. Assetdiscovery, in some implementations, takes as input a policy or userinput from which a set of discovery criteria can be identified. Upondetecting the universe of assets with which the application couldpotentially operate, the criteria can be used to constrain the set, insome cases, providing a resulting ordered list of available assets,which can be expressed as f:C×D→D, where C denotes criteria, D denotes aset of devices, and the codomain is a totally ordered set.

For instance, in the example of FIG. 3B, two discovery criteria 315 a,315 b are identified for an application. Additional criteria may bedefined that is only to apply to some or a specific one of thecategories, or taxonomies, of assets, among other examples. Based on thedefined criteria 315 a-b in this example, the output of discoveryaccording to search criteria A 315 a leads to the codomain of a subsetof devices in the environment—LS1 (310 a), LS2 (310 b), GW2 (310 g) andLA1 (310 h), whereas search criteria B results in LS2 (310 b), LS3 (310c), TS1 (310 d), HS1 (310 e), GW1 (310 f), and LA1 (310 h). Based on theset of defined discovery criteria (e.g., 315 a-b), asset discovery canattempt to reduce the total collection of identified assets to a bestsolution. Additionally, determining the set of discovered assets forbinding consideration can incorporate determining a minimum set ofdiscovered devices, based on the asset requirements of the application.For instance, a minimum set can be selected during discovery such thatat least one asset of each required taxonomy is present in the set, ifpossible. For instance, in the example of FIG. 3B, it can be identified(e.g., by an asset discovery module of the system manager) thatapplication of only criteria B (315 b) in discovery yields at least oneasset for each of the taxonomies defined for the application.

For instance, the block diagram 300 c FIG. 3C illustrates the end-to-enddeployment determinations of a system manager for a particular IoTapplication 350. For instance, based on the discovery conducted in theexample of FIG. 3B, a subset of the assets (e.g., LS2 (310 b), LS3 (310c), TS1 (310 d), HS1 (310 e), GW1 (310 f), and LA1 (310 h)) are“discovered” for potential use by the application (e.g., based on theircompliance with criteria B (and the underrepresentation of assets incompliance with criteria)). Accordingly, assets LS1 and GW2 are not tobound to the corresponding IoT application 350 (as indicated by thedashed lines (e.g., 330)), despite each asset being an instance of oneof the asset requirements (e.g., Light Sensing, Compute, and Storage) ofthe application 350.

As noted above, additional criteria can be defined and applied duringasset binding. During binding, where the set of discovered assetsinclude more than one instance of a particular required asset taxonomy(e.g., as with assets L2 and L3 in asset taxonomy Light Sensing),criteria can be applied to automatically select the asset that is thebetter fit for deployment within the IoT system governed, controlled, orotherwise supported by the application 350. Further, as illustrated inFIG. 3C, it is possible for a single asset instance (e.g., GW1) to bothbelong to two or more taxonomies and to be selected for binding to theapplication for two or more corresponding asset requirements (e.g.,Compute and Storage), as shown. Indeed, a binding criterion can bedefined to favor opportunities where multiple asset requirements of theapplication can be facilitated through a single asset, among otherexamples.

As represented generally in FIG. 3C, asset discovery can provide thefirst level for confining the scope of an asset-to-application assetrequirement mapping. A user or developer can specify (in some cases,immediately prior to runtime) the asset requirements for a particularapplication 350, and an environment can be assessed to determine whetherassets are available to satisfy these asset requirements. Further, thesystem manager utility can automatically deploy and provision discoveredassets to implement that application, should the requisite combinationof assets be found in the environment. Additionally, the system managerutility can automatically apply setting values across the deployedassets in accordance with a configuration defined by a user associatedwith the application. However, if no instances of one or more of theasset requirements (required taxonomies) are discovered, the applicationmay be determined to be un-deployable within the environment. In suchcases, a system manager utility can generate an alert for a user toidentify the shortage of requested taxonomy instances, includingidentifying those taxonomies for which no asset instance was discoveredwithin the environment, among other examples.

Turning FIG. 4, a simplified block diagram 400 is shown illustrating anexample deployment of an IoT application using an enhanced gateway 150.The gateway 150 may include an IoT server 405 to serve one or more IoTapplications using various combinations of devices (e.g., 105 a,b,d)within wireless communication range of the gateway 150. The gateway 150may additionally include a local configuration/service manager 410(e.g., implementing functionality combining configuration manager 240and application manager 255 of FIG. 2) which may manage access to localand remote configuration data and service logic as well as theprovisioning of devices (e.g., 105 a,b,d) in an IoT deployment with thesame. Local configuration data and service logic may be stored in localstorage 415 of the gateway 150. Additional configuration data andservice logic may also be accessed and utilized by the gateway 150 byaccessing (e.g., through configuration/service manager 410) one or moreremote configuration and/or service managers (e.g., collectively 420)serving configuration data and/or service logic (e.g., at data store(s)425). Further, an end user device 130, such as the device of a useradministrating or otherwise associated with a particular IoT applicationdeployment, may provide additional configuration data and/or servicelogic for use by the gateway. Selection of the particular configurationdata or service logic (e.g., from remote or local configuration storage)to be used in the deployment may be controlled by a user through userdevice 130, among other examples. Whether the configuration data orservice logic originates from remote storage (e.g., 425), from a userdevice 130 (or other device (e.g., 105 a) to be potentially included inthe deployed IoT application), local storage of the gateway 150, oranother source, the configuration data or service logic is to be firstprovided to the configuration/service manager 410 on the gateway 150before being used for runtime deployment.

The gateway 150, itself, may be configured to deploy various instancesof the same IoT applications or of different IoT applications. Settingsof each of these deployment instances may be pre-programmed or may beprovided by an administrator (e.g., through an application on a userdevice (e.g., 130) in communication with the gateway 150), and thesesettings may be defined in and implemented through service logic andconfiguration data the gateway utilizes in runtime deployment of an IoTapplication. For instance, a service manager (e.g., 410) of the gateway150 may determine that particular service logic is to be employed for aparticular IoT application deployment. The service logic may be accessedfrom local storage 415 and may, in some cases, indicate coordinationwith one or more other systems (e.g., 420) running additional servicelogic remote from the gateway 150, which the local service manager 410is to request and utilize in certain circumstances and transactions.Upon identifying the service logic to use, the service manager 410 canprovide the service logic 430 to the runtime manager 250 to initiatedeployment of a corresponding IoT application.

Service logic (and the services provided through its execution) maydefine interactions between devices and the actions that are to beperformed through the IoT application's deployment. The service logicmay identify the assets required or desired within the deployment andmay identify the same by asset abstraction. Further, interactions orrelationships between the devices may also be defined, with thesedefinitions, too, being made by reference to respective assetabstractions. Accordingly, the service logic can define the set ofdevices (or device types) that is to be discovered by the gateway anddrive the discovery and binding processes used to identify and select aset of devices (e.g., 105 a,b,d) to be used in the deployment.

The service logic may be carried out locally by the runtime manager 250.In some cases, the service can be implemented as a script and beutilized to trigger events and actions utilizing the deployed devices.As noted above, the service logic may also identify conditions whereoutside computing resources, such as a system hosting remote servicelogic is to be called upon, for instance, to assist in processing datareturned by sensors in IoT application deployment. Services (performedlocally or remotely through corresponding service logic) may include thereceiving of inputs, such as sensor readings, static values or actuatortriggers, functions, processes, and calculations to be applied to theinputs, and outputs generated based on the function results, which mayin turn specify certain actions to be performed by an actuator orresults to be presented on a user device (e.g., 130), among otherexamples. In some cases, portions of service logic may be distributed tocomputing resources, or assets, within the deployed IoT application, anda portion of the input processing and result generation for a deploymentmay be performed by computation assets on the deployed devices (e.g.,105 a,b,d) themselves. Such results may in turn be routed through orreturned to the gateway for further processing (e.g., by service logiclocal to the gateway 150 or by service logic executed on a cloud-basedbackend system (e.g., 420), etc.).

Service deployment may begin with running the provided service logic onthe runtime manager 250. The runtime manager 250 can process the logicto identify a set of asset abstractions mapped to requirements of theIoT application. Identification of these abstractions may promptinitiation of an asset discovery stage 440 (e.g., performed through theIoT Server 405). During discovery devices within communication range ofthe gateway 150 may be discovered together with identifier informationof each device to allow the gateway 150 to determine which assetabstraction(s) may be mapped to each device (with its respectivecollection of assets). In the event that more assets of a particulartype are identified within the location than are needed, the gateway canadditional perform a binding analysis (according to one or more bindingcriteria) to select which device(s) to bind to one or more correspondingasset abstractions.

With the set of devices selected for a corresponding IoT applicationdeployment, automated configuration of the devices may be performed bythe gateway 150. Configuration data may embody a configuration thatidentifies one or more static settings relevant to a particular deviceto which the configuration is being applied. Multiple configurations maybe provided for use in provisioning multiple different types of devicesin a given deployment. Various configuration data in data stores maydescribe multiple, different preset configurations, each tailored to aspecific scenario or deployment. In a particular deployment,configuration data may be provided for each asset abstraction, ortaxonomy, to be included in a corresponding IoT application (e.g.,programmed according to the asset abstractions). Configuration data maybe provided in a standard format, such as XML, JSON or CBOR file, amongother examples. The local configuration manager (e.g., 410) may handlethe deployment of configurations on the discovered devices (e.g., 105a,b,d). The communication between the gateway 150 and the devices (e.g.,105 a,b,d) in a corresponding location or coverage area may be handledby the IoT server component 405. The IoT server 405 may additionallysupport protocol adaptation and connection management to facilitatepotentially multiple distinct (and contemporaneous) deployments of oneor more IoT applications (which potentially employ devices withdiffering communication capabilities and use various communicationprotocols, etc.). Configuration data is sent from the localconfiguration manager to corresponding devices discovered and selectedfor deployment in a particular IoT application, Depending on the numberof devices, hardware capabilities of the local gateway 150 and the localnetwork bandwidth and latency each device (e.g., 105 a,b,d) in adeployment, the gateway 150 may either send configuration data directlyto each of the IoT devices in the deployment or may utilize one or moreof the devices to distribute configuration data to other devices in apeer-to-peer fashion, among other examples.

The runtime manager 250 may define messages (e.g., 435) to be passed tothe various devices in range of the gateway 150 to facilitate discoveryof the devices (as well as ongoing discovery of new devices followingdeployment) and delivery of configuration data to the appropriatedevices (e.g., 105 a,b,d). In some cases, the configuration manager 410of the gateway 150 can identify the appropriate configurationscorresponding to the discovered devices (e.g., 105 a,b,d) and providecorresponding configuration data (at 445) to the IoT server 405 fordistribution (directly or through P2P sharing) of the configuration datato the appropriate devices. For devices (e.g., 105 a,b) including sensorassets (e.g., 110 a, 110 c), configuration data may indicate to theasset (and its host device) how it is to collect and relay data usingthe sensors. For instance, configuration data may be utilized by thehost device to cause data to be collected, generated, or reported at aparticular interval, to tune the sensor to certain settings, to apply afilter to the information sensed by the sensor, among other examples.For devices (e.g., 105 b,d) including actuator assets (e.g., 115 a),configuration data may indicate to the asset how to respond to inputs(e.g., provided through the gateway) and perform activities in responseto these requests. For instance, the configuration data for an actuatorasset may cause an actuator to wait for certain commands or messages450, 455 (e.g., from the IoT server 405) before an action, to tune itsactions to particular settings, select which actions are performed orhow they are performed through the actuator, among other examples.Additional configuration data may be provided in some implementationsfor other asset taxonomies (e.g., other than actuator and sensor assettaxonomies), which may be included in some IoT application deployments.As an example, service logic may facilitate the deployment of a portionof a fog or the deployment of multiple physical assets to implement asingle logical asset (for which corresponding configuration may also beprovided and defined), among other example implementations.

With the configuration data 445 provided to the discovered devices(e.g., 105 a,b,d) initial deployment may be considered complete anddevices (e.g., 105 a,b,d) and their respective assets (e.g., 110 a, 110c, 115 a, etc.) may operate in accordance with the configurationsprovided them. Accordingly, during runtime, sensing messages (e.g., 450,455) may be sent up to the gateway 150 from the devices (e.g., 105a,b,d). Runtime manager 250 can receive the sensing messages (at 435)and utilize service logic either local to or remote from the gateway 150to process the sensor data as inputs. One or more results may begenerated from the processing and used as the basis of actuatingmessages sent from the runtime manager 250 to the IoT server (at 435)for delivery (at 450, 455) to one or more specific actuator assets(e.g., 115 a on devices 105 b and/or 105 d) to cause a correspondingactivity to be performed. In this manner, a system of IoT servicedeployment and resource management may be provided which enablesauto-configuration of devices and fast deployment of services making useof those configurations, all with minimal (and in some cases no)involvement of a user.

Turning to FIG. 5, a simplified block diagram 500 is shown illustratingan example of an automated deployment and configuration of a system in alocation that utilizes two or more gateways (e.g., 150 a-b) tofacilitate IoT applications deployments at the location. In thisparticular example, a number of smartphone devices 130 a-j (or othermobile devices) have been detected within an area. Each of the devicesmay be in range of one or more of multiple gateways 150 a-b in thelocation. Each of the gateways 150 a-b may discover those devicessatisfying criteria of a particular IoT application and within range ofthe gateway, access configuration data relating to a deployment of theparticular IoT application, and provide this configuration data to eachof the selected devices (e.g., 130 a-j). Different models (and eventypes) of mobile devices 130 a-j may be discovered along with the typesof assets provided on each mobile device. For instance, some devices(e.g., 130 a-j) may have a LCD display screen while others may not, somedevice may have a flashlight, some a camera, some a speaker, etc. Theconfiguration data provided to each device may be specific to theparticular asset types discovered for each device (e.g., 130 a-j). Theconfiguration data may indicate to the devices how to utilize theirrespective assets (e.g., actuators, sensors, etc.) with a particular IoTapplication.

As an illustrative example, the gateways 150 a-b may be gatewaysprovided in a large public space, such as a stadium, school, arena,airport, train station, park, or other venue. An example IoT applicationmay provide for emergency events to be reported or detected usingsensors of individual mobile devices (e.g., 130 a-j) and for determinedemergency events to trigger a siren or alarm to be collectively outputfrom the speakers of each of the mobile devices in the area (andconnected to one of the gateway 150 a-b). A configuration may beprovided to indicate that a user input (e.g., through a touchscreen ofcorresponding app on the mobile device) indicating an emergency event(observed by the user) be reported automatically to the gateway.Configuration data may also, or alternatively, direct sensors on thedevice (e.g., camera, microphones, accelerometers, etc.) to collectcertain information and report this information to a nearest gateway,for processing by service logic at the gateway (or a backend system 420)to determine an emergency situation from data collected from one or moreof the devices in range of the gateway. As noted above, a user mayenable a device's participation in such an IoT system by installing andactivating a corresponding app (e.g., that is enabled or prompts a userfor permission to join an emergency management IoT applicationdeployment anytime it detects a gateway supporting the correspondingservice). The gateway may deploy an impromptu, ad hoc instance of theIoT application any time it detects one or more compatible devices(e.g., 130 a-j) within range of one or more gateways (e.g., 150 a-b)deployed at a given location.

Continuing with the foregoing example, upon receiving data from one ormore mobile devices (e.g., 130 a-j), one or more of the gateways 150 a-bmay access service logic and determine whether an emergency situationexists that should prompt an alert. In some cases, the gateway 150 a-bmay send requests to a backend service (e.g., 420) to assist in thedetermination of the emergency. Reliance on a backend service may beutilized in implementations, such as shown in the example of FIG. 5,where multiple discrete gateway devices (e.g., 150 a-b) are utilized tolaunch a single IoT application deployment. For instance, a backendservice (e.g., 420) may orchestrate coordination of the multiplegateways (e.g., 150 a-b), for instance, by aggregating data collected bythe multiple gateways to return a result or by communicating a resultdetermined locally at one of the gateways (e.g., 150 a) to one or moreof the other gateways (e.g., 150 b) in the location. For instance,service logic of an IoT application may dictate that an emergencysituation is to be determined if user inputs (e.g., via a touchscreensensor or microphone sensor asset) are received from two or more of thedevices (e.g., 130 a-j) within a defined window of time. For instance,gateway 150 a may receive two contemporaneous sensor data inputs fromdevices 130 a and 130 c and may use service logic to determine that eachsensor data input reports an emergency situation (e.g., a threat, anaccident, a natural disaster, a medical emergency, etc.) and determinethat these inputs should result in an alarm. The gateway 150 a maycommunicate this determination to one or more of the other gateways(e.g., 150 b) in the area either directly (e.g., in a machine-to-machineinter-gateway message) or via an intermediary network or system (e.g.,system 420). The gateways 150 a-b may then send actuator messages toeach of the devices 130 a-j (detected as having speakers) within rangeof the respective gateway to cause a particular alarm (e.g., one ofmultiple different alarms indicating a particular type of emergency) tobe presented (e.g., at a particular volume) on each of the devices 130a-j simultaneously (or in a determined orchestrated pattern). Thisalarm, collectively sounded by the multiple devices 130 a-j within thelocation may alert not only the devices' users but standers-by of anearby emergency situation.

Further, as illustrated in FIG. 5, automatic deployment andconfiguration of assets may be take place in a continuous manner. Forinstance, a gateway (e.g., 150 a-b), after initially deploying andconfiguring an IoT application deployment may continue to detect theentry of new devices (e.g., 135) into the range of the gateway (e.g.,150 b). While the other, already-deployed assets operate with thegateway in runtime, the gateway may continue to actively discover newdevices that may be utilized in the deployment. For instance, a newdevice 135 may be discovered and its collective assets identified by thegateway 150 b. The gateway 150 b may identify configurations to pushdown to the new device 135 and cause the device 135 to join thedeployment. Likewise, the gateway may identify when devices leave anarea (and are no longer in communication with the gateway), therebyremoving the exiting device from the deployment. In some cases, a devicemay depart a deployment and thereby take with it an asset type neededfor a given deployment (e.g., the only asset detected as currentlymeeting a particular asset abstraction requirement for a correspondingIoT application). In such cases, the departure of an asset may triggeran attempt to discover new devices (to replace the departing asset) oreven the closing of the IoT application session.

It should be appreciated that the example presented above is providedfor illustration purposes only and is but one of potentially limitlessexample IoT applications that may deployed automatically in a locationusing one or more local gateway devices (e.g., 150 a-b). It should befurther appreciated that potentially any collection of devices (e.g.,and not simply end user mobile devices) may be discovered and utilizedby an enhanced gateway in deployment of an IoT application (includingdiverse collections of devices of multiple different types). Indeed,asset abstraction allows for superior flexibility in allowing suchdeployments and automated configurations.

Turning to FIG. 6, as noted above, an application developed according tothe principles of asset abstraction, as described herein, can allow agiven IoT application to be deployed in a number of locations employingvaried collections of IoT devices and assets. Further, configurationscan be provided to determine characteristics of a particular deploymentof the IoT application. In some cases, different configurations can beemployed in different deployments of the same IoT applications, leadingpotentially, to different outcomes in each deployment (including indeployments that are otherwise identical (e.g., using the samecombination of IoT devices in a comparable environment)). In othercases, the same configurations can be employed in distinct deploymentsthat utilize different combinations of devices (e.g., different devicesbound to at least some of the defined abstractions of the IoTapplication) to yield comparable outcomes, even when the devices usedare not identical. As an example, a user can define preferred settingsin a particular configuration for a particular IoT application and causedifferent deployments of the particular IoT application (in otherlocations) to also adopt the user's preferred settings when they aredeployed. For instance, frequent travelers may prefer to create ahome-like environment (e.g., in a hotel, office, or vacation rentalremote from their home) by causing particular configuration data definedby the user (e.g., hosted on a cloud 420) to be applied to eachenvironment in which deployable devices exist. Accordingly, theparticular configuration data can be used to deploy multiple instancesof an IoT application (with potentially different devices) all with thesame settings.

For instance, as shown in the simplified block diagram 600 of FIG. 6, ina first environment 605, a first gateway 150 a can be utilized to deploya first instance of a particular IoT application. Service logic (e.g.,204) to implement the IoT application may be hosted on gateway 150 aand/or remotely by an application server or other system(s) providingcloud resources (e.g., 420). In one example, a smartphone 130 (or otherdevice) may enter the first environment 605 and communicate with acorresponding gateway 150 a to indicate that a first set ofconfigurations should be employed in a deployment of an IoT applicationin the first environment 605. For instance, the gateway 150 a may deploythe IoT application in the first environment 605 by discovering a set ofassets A1, A2, B1, C1, D1, D2, where assets A1 and A2 are instances oftaxonomy A, asset B1 is an instance of taxonomy B, and so on. The IoTapplication, in this example, may have asset requirements correspondingto taxonomies A, B, C, D, and E. Asset binding can be performed,resulting in assets A1, B1, C1, D1 and E1 being selected and deployedfor the instance of the IoT application deployment in Environment A 605.Additionally, a particular set of configurations (defined inconfiguration data 208) may be pushed to the selected assets (A1, B1,C1, D1, E1) for use in the deployment. In some examples, the use of thisparticular set of configurations may be based on a request of a user oreven the identification (e.g., by the gateway) that a particular userdevice associated with a user is present in Environment A 405.Accordingly, the gateway can configure an IoT application's particulardeployment based on the preferences of a user within the environment, aproperty owner (e.g., a manager or owner of the environment), accordingto government or corporate regulations, among other examples.

In another, remote environment, Environment B (610), an instance of thesame IoT application may be deployed by another gateway 150 b in theother environment 610. A different set of assets may be discovered inEnvironment B 610 than was used in Environment A 605, resulting in adifferent set of deployed assets (e.g., A2, B2, C2, D1, and E1) for theIoT application in Environment B 610. Some of the assets in EnvironmentB may be instances of the same asset (e.g., the same device model)discovered in Environment A (e.g., A2, C1, D1). Some assets may not bestrongly tied to location, such as assets on a mobile device (e.g., 130)that may be used in both the IoT application deployments in EnvironmentsA and B. Despite the deployments being different between the twoenvironments (e.g., 605, 610), when viewed at the asset abstractionlevel, the deployments may be functional equivalents. Further, thesettings utilized in each deployment can be applied equally within eachenvironment 605, 610 by providing the same configurations (fromconfiguration data 204) to each of the respective IoT applicationdeployments. As an example, a sensitivity setting value defined in theconfiguration data for the taxonomy instance B can be applied equally toeach of assets B1 and B2 (and, for that matter, B3, when deployed),allowing the system managers of the gateways to attempt to achieveequivalent systems utilizing different collections of assets. While, inpractice, the resulting systems may not be functionally identical (asdifferences between the asset instances (e.g., B1 and B2) may manifest,even when configured with the same settings), implementations of theapplication in varied environments can be at least approximated withminimal effort of the user.

In some cases, the use of a particular set of configurations may bebased on a particular user being present, controlling, or otherwiseadministering a particular deployment of an IoT application.Configuration data defining such a set of configurations may be hostedin a cloud-based or other storage system (e.g., 420) which may beaccessed by multiple different gateways at the direction of potentiallymultiple different users. In some cases, a set of configurations can beprivate to a particular user or group of users. In other cases,configurations may be more widely shared and accessible. For instance,settings defined by a first user (e.g., of device 130) for a firstinstance of a given IoT application can be shared and applied at asecond instance of the same IoT application at the request of anotheruser (e.g., of device 135). For instance, an individual may want toshare their preferred smart home/office settings with their friends. Forinstance, rather than “reinventing the wheel” to determine the idealbalance of settings, a user can simply adopt the settings of anotheruser for application within their own environment (e.g., home automationsettings, smart lighting settings, fitness system settings, smartagriculture settings, etc.) by accessing corresponding configurationdata (e.g., 208) and requesting that this configuration data be employedin a deployment controlled by the other user. For example, a person maybe inspired by visiting a friend's home (e.g., environment 610) anddesire to apply similar settings to an IoT system within their home(e.g., environment 605), among other examples.

While some of the systems and solution described and illustrated hereinhave been described as containing or being associated with a pluralityof elements, not all elements explicitly illustrated or described may beutilized in each alternative implementation of the present disclosure.Additionally, one or more of the elements described herein may belocated external to a system, while in other instances, certain elementsmay be included within or as a portion of one or more of the otherdescribed elements, as well as other elements not described in theillustrated implementation. Further, certain elements may be combinedwith other components, as well as used for alternative or additionalpurposes in addition to those purposes described herein.

Further, it should be appreciated that the examples presented above arenon-limiting examples provided merely for purposes of illustratingcertain principles and features and not necessarily limiting orconstraining the potential embodiments of the concepts described herein.For instance, a variety of different embodiments can be realizedutilizing various combinations of the features and components describedherein, including combinations realized through the variousimplementations of components described herein. Other implementations,features, and details should be appreciated from the contents of thisSpecification.

FIG. 7 is a simplified flowchart 700 illustrating example technique fordeploying an IoT application or other machine-to-machine system. Forinstance, a gateway may be utilized to discover 705 a plurality ofdevices within range of the gateway. The gateway may determine 710assets present on the discovered devices and select 715 devices for aparticular deployment of an IoT application based on the assets meetingone or more asset abstraction requirements defined for the IoTapplication. In some cases, the gateway may make these determinations(e.g., 710, 715) autonomously, while in other cases the gateway mayconsume services of a remote system in connection with making the one ormore of determinations 710, 715. Configuration data may be identified720 for the particular IoT application deployment. The configurationdata may be hosted locally on the gateway and/or hosted by (and accessedby the gateway from) one or more remote data stores and systems. In somecases, the configuration data may correspond to or be selected by a userof the particular IoT application deployment. The identifiedconfiguration data may be sent 725 (in an automated manner (e.g., indirect response to the detection 705 and selection 715 of a device)) toeach of the selected devices to affect how the assets of the devicesoperate within the deployment. Indeed, during the deployment, sensorassets may generate sensor data according to the configurations and thissensor data may be received 730 and processed 735 by the gatewayaccording to service logic selected for the deployment. Portions of theservice logic may be hosted (and executed) on the gateway and/or on aremote server system. Results of the processing may be used to generateactuating messages that are sent 740 by the gateway to one or moreactuator assets of the deployed devices to cause activities to beperformed corresponding to the actuators and based on the informationcollected in the deployment by the sensor assets.

FIGS. 8-9 are block diagrams of exemplary computer architectures thatmay be used in accordance with embodiments disclosed herein. Othercomputer architecture designs known in the art for processors andcomputing systems may also be used. Generally, suitable computerarchitectures for embodiments disclosed herein can include, but are notlimited to, configurations illustrated in FIGS. 8-9.

FIG. 8 is an example illustration of a processor according to anembodiment. Processor 800 is an example of a type of hardware devicethat can be used in connection with the implementations above. Processor800 may be any type of processor, such as a microprocessor, an embeddedprocessor, a digital signal processor (DSP), a network processor, amulti-core processor, a single core processor, or other device toexecute code. Although only one processor 800 is illustrated in FIG. 8,a processing element may alternatively include more than one ofprocessor 800 illustrated in FIG. 8. Processor 800 may be asingle-threaded core or, for at least one embodiment, the processor 800may be multi-threaded in that it may include more than one hardwarethread context (or “logical processor”) per core.

FIG. 8 also illustrates a memory 802 coupled to processor 800 inaccordance with an embodiment. Memory 802 may be any of a wide varietyof memories (including various layers of memory hierarchy) as are knownor otherwise available to those of skill in the art. Such memoryelements can include, but are not limited to, random access memory(RAM), read only memory (ROM), logic blocks of a field programmable gatearray (FPGA), erasable programmable read only memory (EPROM), andelectrically erasable programmable ROM (EEPROM).

Processor 800 can execute any type of instructions associated withalgorithms, processes, or operations detailed herein. Generally,processor 800 can transform an element or an article (e.g., data) fromone state or thing to another state or thing.

Code 804, which may be one or more instructions to be executed byprocessor 800, may be stored in memory 802, or may be stored insoftware, hardware, firmware, or any suitable combination thereof, or inany other internal or external component, device, element, or objectwhere appropriate and based on particular needs. In one example,processor 800 can follow a program sequence of instructions indicated bycode 804. Each instruction enters a front-end logic 806 and is processedby one or more decoders 808. The decoder may generate, as its output, amicro operation such as a fixed width micro operation in a predefinedformat, or may generate other instructions, microinstructions, orcontrol signals that reflect the original code instruction. Front-endlogic 806 also includes register renaming logic 810 and scheduling logic812, which generally allocate resources and queue the operationcorresponding to the instruction for execution.

Processor 800 can also include execution logic 814 having a set ofexecution units 816 a, 816 b, 816 n, etc. Some embodiments may include anumber of execution units dedicated to specific functions or sets offunctions. Other embodiments may include only one execution unit or oneexecution unit that can perform a particular function. Execution logic814 performs the operations specified by code instructions.

After completion of execution of the operations specified by the codeinstructions, back-end logic 818 can retire the instructions of code804. In one embodiment, processor 800 allows out of order execution butrequires in order retirement of instructions. Retirement logic 820 maytake a variety of known forms (e.g., re-order buffers or the like). Inthis manner, processor 800 is transformed during execution of code 804,at least in terms of the output generated by the decoder, hardwareregisters and tables utilized by register renaming logic 810, and anyregisters (not shown) modified by execution logic 814.

Although not shown in FIG. 8, a processing element may include otherelements on a chip with processor 800. For example, a processing elementmay include memory control logic along with processor 800. Theprocessing element may include I/O control logic and/or may include I/Ocontrol logic integrated with memory control logic. The processingelement may also include one or more caches. In some embodiments,non-volatile memory (such as flash memory or fuses) may also be includedon the chip with processor 800.

FIG. 9 illustrates a computing system 900 that is arranged in apoint-to-point (PtP) configuration according to an embodiment. Inparticular, FIG. 9 shows a system where processors, memory, andinput/output devices are interconnected by a number of point-to-pointinterfaces. Generally, one or more of the computing systems describedherein may be configured in the same or similar manner as computingsystem 900.

Processors 970 and 980 may also each include integrated memorycontroller logic (MC) 972 and 982 to communicate with memory elements932 and 934. In alternative embodiments, memory controller logic 972 and982 may be discrete logic separate from processors 970 and 980. Memoryelements 932 and/or 934 may store various data to be used by processors970 and 980 in achieving operations and functionality outlined herein.

Processors 970 and 980 may be any type of processor, such as thosediscussed in connection with other figures. Processors 970 and 980 mayexchange data via a point-to-point (PtP) interface 950 usingpoint-to-point interface circuits 978 and 988, respectively. Processors970 and 980 may each exchange data with a chipset 990 via individualpoint-to-point interfaces 952 and 954 using point-to-point interfacecircuits 976, 986, 994, and 998. Chipset 990 may also exchange data witha high-performance graphics circuit 938 via a high-performance graphicsinterface 939, using an interface circuit 992, which could be a PtPinterface circuit. In alternative embodiments, any or all of the PtPlinks illustrated in FIG. 9 could be implemented as a multi-drop busrather than a PtP link.

Chipset 990 may be in communication with a bus 920 via an interfacecircuit 996. Bus 920 may have one or more devices that communicate overit, such as a bus bridge 918 and I/O devices 916. Via a bus 910, busbridge 918 may be in communication with other devices such as a userinterface 912 (such as a keyboard, mouse, touchscreen, or other inputdevices), communication devices 926 (such as modems, network interfacedevices, or other types of communication devices that may communicatethrough a computer network 960), audio I/O devices 914, and/or a datastorage device 928. Data storage device 928 may store code 930, whichmay be executed by processors 970 and/or 980. In alternativeembodiments, any portions of the bus architectures could be implementedwith one or more PtP links.

The computer system depicted in FIG. 9 is a schematic illustration of anembodiment of a computing system that may be utilized to implementvarious embodiments discussed herein. It will be appreciated thatvarious components of the system depicted in FIG. 9 may be combined in asystem-on-a-chip (SoC) architecture or in any other suitableconfiguration capable of achieving the functionality and features ofexamples and implementations provided herein.

Although this disclosure has been described in terms of certainimplementations and generally associated methods, alterations andpermutations of these implementations and methods will be apparent tothose skilled in the art. For example, the actions described herein canbe performed in a different order than as described and still achievethe desirable results. As one example, the processes depicted in theaccompanying figures do not necessarily require the particular ordershown, or sequential order, to achieve the desired results. In certainimplementations, multitasking and parallel processing may beadvantageous. Additionally, other user interface layouts andfunctionality can be supported. Other variations are within the scope ofthe following claims.

In general, one aspect of the subject matter described in thisspecification can be embodied in methods and executed instructions thatinclude or cause the actions of identifying a sample that includessoftware code, generating a control flow graph for each of a pluralityof functions included in the sample, and identifying, in each of thefunctions, features corresponding to instances of a set of control flowfragment types. The identified features can be used to generate afeature set for the sample from the identified features

These and other embodiments can each optionally include one or more ofthe following features. The features identified for each of thefunctions can be combined to generate a consolidated string for thesample and the feature set can be generated from the consolidatedstring. A string can be generated for each of the functions, each stringdescribing the respective features identified for the function.Combining the features can include identifying a call in a particularone of the plurality of functions to another one of the plurality offunctions and replacing a portion of the string of the particularfunction referencing the other function with contents of the string ofthe other function. Identifying the features can include abstractingeach of the strings of the functions such that only features of the setof control flow fragment types are described in the strings. The set ofcontrol flow fragment types can include memory accesses by the functionand function calls by the function. Identifying the features can includeidentifying instances of memory accesses by each of the functions andidentifying instances of function calls by each of the functions. Thefeature set can identify each of the features identified for each of thefunctions. The feature set can be an n-graph.

Further, these and other embodiments can each optionally include one ormore of the following features. The feature set can be provided for usein classifying the sample. For instance, classifying the sample caninclude clustering the sample with other samples based on correspondingfeatures of the samples. Classifying the sample can further includedetermining a set of features relevant to a cluster of samples.Classifying the sample can also include determining whether to classifythe sample as malware and/or determining whether the sample is likelyone of one or more families of malware. Identifying the features caninclude abstracting each of the control flow graphs such that onlyfeatures of the set of control flow fragment types are described in thecontrol flow graphs. A plurality of samples can be received, includingthe sample. In some cases, the plurality of samples can be received froma plurality of sources. The feature set can identify a subset offeatures identified in the control flow graphs of the functions of thesample. The subset of features can correspond to memory accesses andfunction calls in the sample code.

While this specification contains many specific implementation details,these should not be construed as limitations on the scope of anyinventions or of what may be claimed, but rather as descriptions offeatures specific to particular embodiments of particular inventions.Certain features that are described in this specification in the contextof separate embodiments can also be implemented in combination in asingle embodiment. Conversely, various features that are described inthe context of a single embodiment can also be implemented in multipleembodiments separately or in any suitable subcombination. Moreover,although features may be described above as acting in certaincombinations and even initially claimed as such, one or more featuresfrom a claimed combination can in some cases be excised from thecombination, and the claimed combination may be directed to asubcombination or variation of a subcombination.

Similarly, while operations are depicted in the drawings in a particularorder, this should not be understood as requiring that such operationsbe performed in the particular order shown or in sequential order, orthat all illustrated operations be performed, to achieve desirableresults. In certain circumstances, multitasking and parallel processingmay be advantageous. Moreover, the separation of various systemcomponents in the embodiments described above should not be understoodas requiring such separation in all embodiments, and it should beunderstood that the described program components and systems cangenerally be integrated together in a single software product orpackaged into multiple software products.

The following examples pertain to embodiments in accordance with thisSpecification. One or more embodiments may provide a method, a system, amachine readable storage medium, and an apparatus including a gatewayincluding an antenna to connect to a set of devices over a wirelessnetwork and configuration management logic executable to identify a setof configurations corresponding to a particular application, and sendconfiguration data to at least a portion of the set of devices to causethe set of configurations to be adopted in a particular deployment ofthe particular application that is to use the set of devices. Thegateway can further include service management logic executable todiscover the set of devices within range of the gateway, determine thatone or more of the devices include assets corresponding to one or moreasset abstractions defined for the particular application, where theconfiguration data is sent to at least a portion of the set of devicesbased on the assets corresponding to the asset abstractions, and theassets include at least one sensor asset and at least one actuatorasset, receive sensor data generated by the at least one sensor assetduring the particular deployment, process the sensor data according toservice logic of the particular application to generate a result, andgenerate actuating data to be sent to the at least one actuator assetbased on the result during the particular deployment.

In one example, the service logic is hosted on the gateway.

In one example, the service management logic is further to send arequest to a remote server hosting the service logic, where the requestis to include at least a portion of the sensor data, and receive aresponse to the request from the remote server, where the result isbased on the response.

In one example, the gateway includes local data storage to host at leasta portion of the configuration data.

In one example, the configuration management logic is further to:identify that first configuration data hosted on a data store remotefrom the gateway is to be used in deployment of particular applicationand access the first configuration data, where the configuration datasent to at least a portion of the set of devices includes the firstconfiguration data.

In one example, the configuration management logic is to access secondconfiguration data hosted local to the gateway and use the secondconfiguration data in another, second deployment of the particularapplication.

In one example, the configuration data sent to at least a portion of theset of devices in the particular deployment includes both the firstconfiguration data and the second configuration data.

In one example, the configuration data specifies settings to be appliedby the at least one sensor asset in generating the sensor data duringdeployment of the particular application.

In one example, the configuration data further specifies settings to beapplied by the at least one actuator asset in responding to actuatingdata provided by the gateway during the particular deployment of theparticular application.

In one example, the set of devices includes a smart phone deviceincluding at least one sensor asset and at least one actuator asset.

In one example, the set of devices includes a plurality of devicesincluding a plurality of different types of assets.

In one example, each of the plurality of different types of assets mapsto one or more of a plurality of defined asset abstractions.

In one example, the one or more asset abstractions of the particularapplication include a subset of the plurality of defined assetabstractions.

In one example, the service management logic is further to monitor fordevices entering or exiting the range of the gateway during theparticular deployment.

In one example, the particular deployment corresponds to a particulargeographic location and the gateway is positioned with the particulargeographic location.

In one example, the service management logic is to automaticallyconfigure a new device detected as entering the range of the gateway andinclude the new device in the particular deployment without interruptingthe particular deployment.

One or more embodiments may provide a method, a system, a machinereadable storage medium, and an apparatus including a set of assetsincluding at least one of a sensor asset and an actuator asset, acommunication module to communicate wirelessly with a gateway devicepositioned within a particular geographical location, and logicexecutable to receive configuration data from the gateway device inresponse to the apparatus entering a wireless communication range of thegateway device, apply one or more configurations identified in theconfiguration data to at least a particular one of the set of assetsduring a deployment of a particular application including amachine-to-machine system to include the apparatus and at least oneother device, and communicate with the gateway device during thedeployment of the particular application.

In one example, the configuration data is received automatically withoutintervention of a human user in response to the apparatus entering thewireless communication range of the gateway device.

In one example, the configuration data originates from a source remotefrom the gateway device and the apparatus.

One or more embodiments may provide a system including one or moregateway devices corresponding to a particular location, where each ofthe one or more gateway devices includes service management logicexecutable by a processor of the gateway device to identify servicelogic corresponding to a particular application, discover a set ofdevices within the particular location based on the service logic,determine that one or more of the set of devices includes one or moreassets corresponding to one or more asset abstractions defined for theparticular application, where the one or more assets include at leastone sensor asset and at least one actuator asset, receive sensor datagenerated by the at least one sensor asset, process the sensor dataaccording to the service logic to generate a result, and generateactuating data to be sent to the at least one actuator asset based onthe result. Each gateway device may additionally include configurationmanagement logic executable by a processor of the gateway device toidentify a set of configurations corresponding to the particularapplication and send configuration data to at least a portion of the setof devices, where the configuration data is sent to at least a portionof the set of devices based on the assets corresponding to the assetabstractions.

In one example, where the service logic is programmed according to adefined set of asset abstractions including the one or more assetabstractions.

In one example, the system further includes a data store remote from theone or more gateway devices, where the data store stores particularconfiguration data for access by a plurality of gateway devicesincluding the one or more gateway devices, and the configuration datasent to at least a portion of the set of devices includes the particularconfiguration data.

In one example, the one or more gateways are a plurality of gatewaysdevices.

In one example, the system further includes a remote server hosting theservice logic and the result is based on processing of at least aportion of the sensor data by the remote server.

Thus, particular embodiments of the subject matter have been described.

Other embodiments are within the scope of the following claims. In somecases, the actions recited in the claims can be performed in a differentorder and still achieve desirable results. In addition, the processesdepicted in the accompanying figures do not necessarily require theparticular order shown, or sequential order, to achieve desirableresults.

The invention claimed is:
 1. An apparatus comprising: a gateway, whereinthe gateway comprises: an antenna to connect to a set of devices over awireless network; configuration management logic executable to: identifya set of configurations corresponding to a particular application,wherein the particular application defines a plurality of models andinteractions between the plurality of models each of the plurality ofmodels includes a respective abstract representation of a respective oneof a plurality of device types and operational capabilities of thecorresponding device type, and the application is cause a systemcomprising the plurality of device types to perform particular function;send configuration data to at least a portion of the set of devices tocause the set of configurations to be adopted in a particular deploymentof the particular application that is to use the set of devices; andservice management logic executable to: discover the set of deviceswithin range of the gateway; determine that one or more of the set ofdevices comprise assets correspond to the plurality of models definedfor the particular application, wherein the configuration data is sentto at least a portion of the set of devices based on the assets the oneor more devices corresponding to the plurality of models, and the assetscomprise at least one sensor asset and at least one actuator asset;receive sensor data generated by the at least one sensor asset duringthe particular deployment; process the sensor data according to servicelogic of the particular application to generate a result; and generateactuating data to be sent to the at least one actuator asset based onthe result during the particular deployment and to perform at least aportion of the particular function.